Filtering narrows millions of audit records down to the ones you actually want to see, for example only deletions, or only the activity of one user.

There are two kinds of filter in the Log View. Changed Date uses a date filter. Every other column uses a value filter. They work differently, so they are covered separately below.

Filter by a value

1. Select Filters on the right edge of the Log View.
2. Select the column you want to filter by. It expands to show its values.

Figure 1. The Filters panel open, listing every filterable column as an expandable section. The encrypted Record column is absent.

1. Clear (Select All), then select only the values you want to keep.

Figure 2. The Operation filter expanded, showing the set filter with a search box, Select All, one checkbox per value present in the data, and Clear Filter.

The grid updates as you choose, and Total Records at the bottom shows how many records match.

Filter from a column

You can reach the same filter from the grid itself. Select the three dots in a column's header and select Filter.

Find a value quickly

Each value filter has its own Search... box. Use it when a column has many distinct values and you already know which one you want.

Filter by date

Changed Date does not offer checkboxes. It offers a date filter instead.

1. Select Filters, then select Changed Date.
2. Under FILTER BY, choose how you want to match the date.
3. Select Apply.

Figure 3. The Changed Date filter, showing the FILTER BY dropdown set to Last 7 days with the Apply and Reset buttons.

The choices are:

Choose To see On One specific day. On or after Everything from a date onwards. On or before Everything up to a date. Between Everything inside two dates. Today, Yesterday The obvious ones, with no date to type. This week, This month, This year The current period so far. Last week, Last month, Last year The whole of the previous period. Last 7 days A rolling week back from today.

The shortcuts such as Today and Last 7 days need no dates typed in, which makes them the fastest way to answer "what happened recently".

Select Reset to clear the date filter. The FILTER BY dropdown returns to its unset state and the grid shows every date again.

Clear a filter

For a value filter, select Clear Filter below the list. For the date filter, select Reset. To clear several, open each filter in turn. The Total Records figure returns to the full count when nothing is filtered.

Only real values are listed

A filter offers the values that exist in that environment's data, and nothing else. If Delete does not appear under the Operation filter, that environment has no deletions recorded. The value is missing because there is nothing to match, not because the filter is broken.

One column cannot be filtered

Record is stored encrypted, so it does not appear in the Filters panel at all and its column menu offers no Filter option. See Encrypted Columns and What You Cannot Do With Them.

Tip

Filters and sorting work together. Filter down to what matters, then sort the result by Changed Date to read it as a sequence.